blah.dev
Log inApply

OAuth 2.0 provider

A complete OAuth 2.0 Authorization Server with OpenID Connect support for the blah.dev community.

What is blah OAuth?

blah OAuth lets you add “Sign in with Blah” to your applications. Users authenticate with their blah.dev account, and your app receives verified identity information through standard OAuth 2.0 flows.

The provider implements the Authorization Code Flow with PKCE support, token introspection, token revocation, and OpenID Connect discovery — all the pieces you need for secure, standards-compliant authentication.

The flow

Fig. 1Sign in with Blah, step by step: your app sends the person to blah.dev, they sign in and consent, and your app trades the code it gets back for tokens.

Features

Authorization code flow
Standard OAuth 2.0 flow with PKCE for public and confidential clients
Token management
Access tokens, refresh tokens with rotation, and revocation
OpenID Connect
Discovery endpoint, UserInfo claims, and standard scopes
Client management
Dashboard and API for registering and managing OAuth applications
Token introspection
RFC 7662 compliant token validation for resource servers
Security
Argon2id hashing, SHA-256 token storage, CSRF protection

Standards compliance

  • RFC 6749OAuth 2.0
  • RFC 6750Bearer tokens
  • RFC 7636PKCE
  • RFC 7662Token introspection
  • RFC 7009Token revocation
  • RFC 8414Server metadata
  • OpenID Connect Core 1.0Identity

Next steps